apiVersion: "cilium.io/v2"
kind: CiliumNetworkPolicy
metadata:
  name: "l3-policy-demo"
spec:
  description: "L3 policy for allowing all traffic in demo DS"
  endpointSelector:
    matchLabels:
      zgroup: testDS
  ingress:
  - fromEndpoints:
    - matchLabels:
        zgroup: testDSClient
